Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gCXD9zxpZ7NZkXihEjkTqy0Eh0Y.roa
File:                     gCXD9zxpZ7NZkXihEjkTqy0Eh0Y.roa (raw, json)
Hash identifier:          2sPnGOtBhVmvNlT8K3cVjhWX+vbQtnwjd8luB9na3GE=
Subject key identifier:   80:25:C3:F7:3C:69:67:B3:59:91:78:A1:12:39:13:AB:2D:04:87:46
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       C5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gCXD9zxpZ7NZkXihEjkTqy0Eh0Y.roa
Signing time:             Wed 29 Mar 2023 16:08:56 +0000
ROA not before:           Wed 29 Mar 2023 16:08:56 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.144.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:08:56 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=8025C3F73C6967B3599178A1123913AB2D048746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f1:3b:e7:1d:4a:d8:b8:56:7d:09:74:bf:a6:
                    48:e5:74:ec:1d:ab:3a:00:8f:cc:09:19:a2:e5:93:
                    09:cc:20:62:ce:8e:81:d7:ea:99:7d:8f:79:28:d9:
                    5b:15:ce:f0:58:2c:6c:35:f9:bf:82:b1:80:99:88:
                    29:cf:96:40:1d:22:5e:10:a5:d0:12:aa:8e:6d:04:
                    4e:54:b4:f3:f7:14:9b:f4:0a:83:eb:dd:f6:27:7e:
                    fa:d3:9a:3b:8f:77:c3:19:d7:31:c2:dc:91:8a:b5:
                    f4:2b:6f:db:83:39:d8:0f:7d:98:b6:a7:ce:84:35:
                    35:4a:4c:6d:4c:b0:f6:88:ab:c6:d3:dd:c5:e1:e4:
                    f8:26:2e:f7:83:54:10:13:77:ba:83:c8:bb:49:4f:
                    fe:c2:3f:f9:10:b2:7c:8a:27:07:14:83:41:8d:8c:
                    f6:14:47:f2:34:da:77:1b:0d:17:0f:a1:14:7b:32:
                    38:e9:0b:82:d9:f4:0b:17:22:1a:64:8a:c1:25:2f:
                    9c:f9:b7:22:58:32:4c:42:da:4c:5c:bb:98:62:7c:
                    75:7d:5d:cb:ba:5c:72:0b:7e:49:64:fb:12:41:f2:
                    f6:e3:85:2d:57:a6:49:ac:2a:21:fd:3b:fb:f9:99:
                    56:3b:e6:28:55:17:c8:96:b7:00:b6:38:f8:4e:89:
                    03:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:25:C3:F7:3C:69:67:B3:59:91:78:A1:12:39:13:AB:2D:04:87:46
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gCXD9zxpZ7NZkXihEjkTqy0Eh0Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:31:da:00:4f:2f:e1:f3:05:53:b1:34:77:fb:e0:7c:79:e1:
         26:c6:28:da:1d:91:9c:26:e8:30:24:27:cc:ec:9c:d4:55:bf:
         0c:76:48:24:47:6c:c8:55:7f:7c:1d:08:77:ac:86:52:4c:89:
         87:0f:66:67:7a:4c:70:51:33:56:dc:38:8e:4f:87:2e:0c:c1:
         3f:85:fc:db:68:7b:e0:0a:f4:b1:ba:69:f3:35:81:56:ad:d2:
         48:21:3d:3c:86:79:4e:10:42:ee:08:8f:6c:51:c9:8c:32:fc:
         a7:09:d4:f4:2a:2f:ef:11:7b:38:53:c9:cc:0c:aa:6f:2b:64:
         20:32:f5:bc:00:fe:2f:ce:dc:3e:d2:fb:89:a6:3b:43:0c:60:
         c4:49:2f:31:81:db:c3:f0:75:31:37:9d:21:70:92:ba:6c:92:
         b1:51:ec:1d:05:54:9d:b2:44:85:2f:f7:19:ee:15:4d:a4:a6:
         5f:fc:82:82:f9:1c:5e:d9:ea:c2:ef:24:aa:57:f7:a4:c2:cf:
         5e:7f:93:8a:e5:00:2f:62:6b:67:bf:4c:9d:d3:0c:73:ca:f5:
         23:fb:74:df:a4:32:da:5f:9b:cd:e3:02:05:04:17:44:2c:28:
         d9:de:7c:84:b1:cf:a8:51:93:5f:bd:78:4e:d5:66:62:9e:92:
         0e:6b:02:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----